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1 The above-entitled matter came on for oral hearing on Wednesday, 

2 November 4, 2009, at The U.S. Patent and Trademark Office, 600 Dulany 

3 Street, Alexandria, Virginia, before Victor Lindsay, Notary Public. 
4 

5 THE USHER: Calendar No. 20, Appeal No. 2009-5011. 

6 Mr. Spooner? 

7 JUDGE DIXON: Hello, Mr. Spooner. 

8 MR. SPOONER: Good morning. 

9 JUDGE DIXON: You have 20 minutes. You may begin whenever 

10 you're ready. 

11 MR. SPOONER: Okay, let me give him - 

12 THE REPORTER: Thank you very kindly, sir. 

13 MR. SPOONER: Just to make sure. 

14 Well, I'm here this morning representing Advanced Risk Machines, 



15 Limited, ARM, a UK computer design company, and the problem that this 

16 invention is addressing is a problem with respect to security of computer 

17 interconnections, smart cards and that sort of thing. It appears that by 

18 observing the external timing and power requirements of a particular 

19 program, you can figure out what some of the algorithms are in that 

20 program, what the instructions are, what the private key might be. So to 

21 avoid that, what people came up with is a way to if it says write this 

22 particular information to storage, you would write it to a dummy store or to a 

23 regular store so that someone looking at the external power requirements 

24 couldn't see any difference. So they would not be able to know that aha, 

25 when I put this input in, it's doing a write at this point; therefore it's probably 
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1 doing this thing. 

2 So with such a system, it will defeat what they call the simple power 

3 analysis, SPA. Simple power analysis uses an algorithm, and depending 

4 upon the branching, it branches to a proper storage and writes to that one, or 

5 it branches to a dummy storage, a trash register, and writes to that one. 

6 Unfortunately, that branching that occurs, you can tell that. If you look at 

7 detailed power, time traits of a particular circuit over a number of times, the 

8 so-called differential power analysis, if you look at that over a number of 

9 cycles, you can deduce where the branching is occurring. And so it's 

10 deducing that branching that gives you the information as to what the key is 

1 1 for that particular secured cryptographic program. 

12 All right, Applicant came up with a way to avoid having that 

13 branching attribute being discernible from the external power and timing 

14 characteristics of the circuit. The claims specify it. The last two items of the 

15 claim, the interrelationship, at least one data processing instruction executed 

16 by the processor core is a conditional- write data processing instruction. 

17 We'll just call that instruction to make things simple. That instruction 

18 encodes condition codes, so that interrelationship in terms of the data 

19 processing register and the ~ and that instruction, that's critical. 

20 The second critical thing is having a trash register. Now trash 

21 registers are known in the past. They've had them before. The QIU 

22 reference has a trash register. However, it doesn't have a trash register that 

23 has the interrelationships specified in the claim. In other words, one, to 

24 which a result data value will be written instead of a data processor register. 

25 In other words, that's dependent on this condition code that's contained in the 
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1 instruction. Remember the QIU reference, just like the other SPA resistant 

2 programs, are directed to an algorithm that has branching right at this place 

3 or right at this place. The invention has this conditional-write data 

4 processing instruction, and encoded within that is this condition code that 

5 says okay, you're permitted to write it, or you're not permitted to write it. 

6 JUDGE HOMERE: Counselor? 

7 MR.SPOONER: Yes, sir. 

8 JUDGE HOMERE: Okay, well, let me stop you right there and 

9 direct your attention to QIU at column 3, the last paragraph, where it's 

10 talking about conditional processes. It's discussing a process of performing 

11 an unnecessary multiplication algorithm, multiplication operation. 

12 MR.SPOONER: Sure, absolutely. 

13 JUDGE HOMERE: And then if the result is a zero, therefore the key 

14 value would be ~ the result would be stored in the dummy register. 

15 MR.SPOONER: Absolutely. 

16 JUDGE HOMERE: Yeah, and if it's a one, then it would be stored in 

17 the data processing register. 

18 MR.SPOONER: Okay. 

19 JUDGE HOMERE: Okay. How is that different from what you just 

20 said, because that - the storing of that results or in the QIU is conditional 

21 upon the value of the ~ upon it being a zero or one? 

22 MR. SPOONER: Okay. Firstly, it's not an instruction. It's not a write 

23 instruction, and it's not something that's encoded within that write - that 

24 conditional write data instruction. Secondly — 

25 JUDGE HOMERE: Are you saying that the multiplication operation 
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1 is not an instruction? 

2 MR. SPOONER: No, that's not -- that's part of the algorithm. That's 

3 part of the security algorithm that you're trying to break or that somebody is 

4 trying to break. 

5 JUDGE HOMERE: No, it's the system that performed that 

6 multiplication algorithm in order to fool the attacker or someone, yeah, in 

7 order to obstruct -- 

8 MR. SPOONER: Absolutely correct. 

9 JUDGE HOMERE: Okay. 

10 MR. SPOONER: That's exactly what the prior art is trying to do. 

11 Both systems are trying to fool the attacker. 

12 JUDGE HOMERE: Exactly. 

13 MR. SPOONER: QIU or QIU, I'm not sure how you pronounce it, is 



14 a system that uses the old method. It has an algorithm, it's an algorithm 

15 based system, and it has branching which occurs based on the algorithm, so 

16 you can then -- you put a bunch of inputs into this to try to break it and see 

17 what happens and measure the power and timing requirements, and you will 

18 be able to detect over a large number of cycles the branching effect, when it 

19 branches, when it doesn't branch. You can detect that. 

20 JUDGE HOMERE: Exactly. 

21 MR. SPOONER: The way the Applicant's claim invention works to 

22 defeat even that is it has the same trash register, it has the same writing, but 

23 how it does that writing is the difference, and it has this programming 

24 which — well, it's not programming. It's part of the machine, but it has this 

25 conditional- write data processing instructions in there. In that instruction, 
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1 encoded in the instruction is a condition code that says yeah, this is real data 

2 or no, this isn't real data, and that's the thing that tells it where to write and 

3 the fact -- 

4 JUDGE HOMERE: Yeah - 

5 MR. SPOONER: Let me just finish that one thought. 

6 JUDGE HOMERE: Sure. 

7 MR. SPOONER: The fact that that is encoded within the instruction 

8 means that that can't be detected externally. It's going to see that. It's going 

9 to write. It just writes to one place or the other, but it doesn't make that 

10 branching decision in the algorithm which can be sensed externally. 

11 JUDGE DIXON: So it's more of a random write? 

12 MR. SPOONER: Yeah, well, it writes all the time, so it's -- 

13 JUDGE DIXON: Right. 

14 MR. SPOONER: So if you're looking at this thing and you're seeing 



15 oh, this is the power and the time required to write, it does that every time, 

16 and only the internal machine, because this condition code is coded in that 

17 instruction, only the machine sees aha, for the first one we want to put it in 

18 the active data store. The second one and the third one, we just dump those 

19 to the dummy register. But externally, the power output or the power usage 

20 and the timing usage of that thing is - 



21 JUDGE DIXON: It's going to be the same or similar. 

22 MR. SPOONER: You can't see it. You can't see any distinguishable 

23 difference. 

24 JUDGE HOMERE: I thought that was the idea behind the 

25 unnecessary multiplication operation because QIU -- hold on a second. Let 
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1 me finish that thought. 

2 MR. SPOONER: You're absolutely correct. 

3 JUDGE HOMERE: Yeah, QIU is performing and is continuously 

4 performing those multiplication operations, these unnecessary multiplication 

5 operations in order to generate those zeros or ones. 

6 MR. SPOONER: Absolutely, yeah. 

7 JUDGE HOMERE: Okay, and then the -- 1 mean if you have a zero, 

8 then it goes into the trash register, or one, it goes to the data processing 

9 register. Now aren't these conditions that are within the - that are part of a 

10 result of that operation, the multiplication operations? 

1 1 MR. SPOONER: No, no. They're like a flag or a private key, a bit in 

12 a private key or something like that. That causes the algorithm to branch 

13 one way or the other. 

14 JUDGE HOMERE: Yes. 

15 MR. SPOONER: Which then says where it's going to be stored. So 

16 they're all the same as far as trying to ~ QIU is trying to do the dummy 

17 operations as well, but when it says do the dummy operation, it gives a 

18 signature of that decision. 

19 JUDGE HOMERE: Yeah, but - 

20 MR. SPOONER: Because it's not encoded within a conditional write 

21 instruction. It's part of the algorithm. So that's the difference. The — ours is 

22 not an algorithm based system. It's a write instruction and hidden in the 

23 write instruction, encoded within the instruction, as the claim says -- 

24 JUDGE HOMERE: And as the Examiner submitted in the Examiner's 

25 Answer, well, an algorithm is made up of a variety of instructions, like as the 



7 



Appeal 2009-005011 
Application 10/527,812 



1 Examiner said well, said the multiplication algorithm has -- is made up of a 

2 variety of instructions where you have well, add this, multiply there, store 

3 there. These are instructions. 

4 MR.SPOONER: Um-hum.. 

5 JUDGE HOMERE: Okay, and then one of which being well, if -- 

6 and one of these instructions being if the value — if the result value is a zero, 

7 store in the register, otherwise store value in the trash register. 

8 MR.SPOONER: Right. 

9 JUDGE HOMERE: If it is a one, then store in the data processing 

10 register. 

11 MR.SPOONER: Right. 

12 JUDGE HOMERE: I don't understand why this would not be 

13 instructions that are conditional ~ as a matter of fact, QIU refers to them as 

14 conditional processes, okay, in the section, in the section that I just pointed 

15 you -- directed you to. 

16 MR. SPOONER: All right, but conditional isn't the word. The 

17 operative language is -- look up in the claim, at least one data processing 

18 instruction and - is a conditional write data processing instruction encoding 

19 condition codes specifying conditions under which blah, blah, blah. It will 

20 or will not be permitted to write data to effect a change in state. 

21 So QIU doesn't have any conditional write instruction. It doesn't have 

22 any instruction that has an encoded condition code and that -- and because it 

23 doesn't have that, it can't possibly have the interrelationship that that 

24 encoded condition code says to write or not write to the processor itself, 

25 processor store as opposed to the trash store. So it has some similarities -- 
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1 JUDGE HOMERE: So counselor, if I ~ let me see if I understand 

2 you well. 

3 MR. SPOONER: Okay. 

4 JUDGE HOMERE: So you're saying - so you're agreeing that QIU 

5 teaches if the result of that multiplication is a one, store in the data 

6 processing system. If it's a zero, store in the trash register. So we're saying 

7 that when it's a zero -- 

8 MR. SPOONER: No, that's incorrect I believe. Look at column 3, 

9 lines 53 to 56. 

10 JUDGE HOMERE: Okay. 

1 1 MR. SPOONER: For example, when the value of a bit in the private 

12 key is a one ~ 

13 JUDGE HOMERE: Okay. 

14 MR. SPOONER: -- an associated multiplication operation occurs. 



15 When the value of the bit in the key is zero, no associated multiplication 

16 occurs. You're talking about a different operation. We're not talking about a 

17 write instruction and then something encoded in that write instruction that 

18 says yes, this is the data processing store, or this is the trash register. That 

19 part of QIU relates to whether or not a multiplication process is to occur. 

20 That's part of the algorithm. 



21 JUDGE HOMERE: Yes, but there's also a decision that's made 

22 between where the data itself -- whether the data should be stored in the 

23 dummy register or the data processing register as well. I think that's spelled 

24 out in column 6, line ~ 

25 MR. SPOONER: Oh, that's a different - 
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1 JUDGE HOMERE: What is it? 

2 MR. SPOONER: You were talking about column 3. I'm sorry. I 

3 misunderstood. 

4 JUDGE HOMERE: Yeah, oh, yeah. That further -- column 6, lines 5 

5 through 15 expands - 

6 MR. SPOONER: Yes. 

7 JUDGE HOMERE: -- further upon the concept of the multiplication 

8 of the zero and the ones, and if you look at from column 6, lines 5 -- 

9 MR. SPOONER: But again - 

10 JUDGE HOMERE: -- it says that if the value key bit is a one 

1 1 indicating a modular multiplication, okay, and the result is stored in register 

12 512. 

13 MR. SPOONER: Sure, yeah. 

14 JUDGE HOMERE: Uh-huh. 

15 MR. SPOONER: Continue down. 

16 JUDGE HOMERE: Okay, continue down, and then if it's a zero it's 

17 stored in register 516 — 

18 MR. SPOONER: No, no. 

19 JUDGE HOMERE: -- which is the trash register. 

20 MR. SPOONER: No, no, it says if it's a zero, "no modular 

21 multiplication is necessary; yet to fool the attacker, the normal multiplication 

22 modular reduction store to memory process is implemented." 

23 JUDGE HOMERE: Is implemented and then go — read the following 

24 sentence. So the use of register 516, which is the dummy register, can be 

25 used to accomplish the emulated process while not corrupting the value of 
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1 the stored damage which is the data processing system. 

2 MR. SPOONER: Sure. 

3 JUDGE HOMERE: Okay, so in that case, so when it's a zero, it's 

4 stored in the dummy register. 

5 MR. SPOONER: Okay. 

6 JUDGE HOMERE: So technically I mean so we really — we can 

7 focus that to what I just alluded to earlier. When it's a zero, when the value 

8 key bit is a zero -- 

9 MR. SPOONER: Right, right. 

10 JUDGE HOMERE: — the result is stored in the dummy register, 

1 1 whereas when it's a one, it's stored in the data processing register. 

12 MR. SPOONER: I have no problem with that. The problem -- that's 

13 not inconsistent with our position, because it doesn't teach the fact that this 

14 condition code is embedded in the write code. This is part of the -- these are 

15 their -- the bits are part of their public or private key that they're referring to. 

16 That's not -- 

17 JUDGE HOMERE: Well, but this is not transparent to the user. The 

18 user does not know that this is happening, the attacker — this whole process 

19 is taking place in order to fool the attacker, so the attacker doesn't know that 

20 it's something that's happening privately in the system. 

21 MR. SPOONER: But the attacker will see that. He will see that in 

22 the power signature analysis, the power and timing analysis of how that 

23 circuit works. In other words — 

24 JUDGE HOMERE: That's the whole purpose - 

25 MR. SPOONER: -- you lose your smart card, and somebody wants to 
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1 get money out of your ATM. They throw it into an analyzer, and they put 

2 signal inputs into it. They look at then the output . What happens? And so 

3 by putting in a whole sequence of different signals, timing, power levels and 

4 all of that, they will get different outputs. By doing that repeatedly, that's 

5 the differential power analysis, even if QIU is built into your smart card 

6 system, they will ultimately see the fingerprint of the branching that occurs 

7 in the algorithm that's used to protect that smart card, and they will then be 

8 able to deduce what your key is and use that card and get money out of your 

9 ATM. 

10 JUDGE HOMERE: At the very outset that's why -- that's the exact 

1 1 problem that QIU is trying to resolve, and it says that right here in column 1, 

12 lines -- 

13 MR. SPOONER: We agree. 

14 JUDGE HOMERE: Yes. 

15 MR. SPOONER: We agree completely. 

16 JUDGE HOMERE: Okay. 

17 MR. SPOONER: Both systems are trying to protect that smart card. 

18 QIU protects against the simple power analysis. If you look at the bold 

19 view, you'll see that QIU, by storing to the dummy register -- remember, we 

20 never said that QIU doesn't have a trash register. QIU does, and it stores to 

21 that trash register so that the overall broad power, if you look at the broad 

22 power requirements of that chip, it will look very similar, and you won't be 

23 able to figure it out. But if you do it many, many times, and you look very 

24 closely at it, you'll see the difference in storing, the difference which occurs 

25 in that branching at -- of the algorithm that occurs when you decide to go to 
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1 the trash register as opposed to the other. And in our invention, we don't do 

2 that. We don't have that branching determination that is made, so you can't 

3 see it. It's encoded in the instruction, in these conditional-write data 

4 processing instructions, and that's the trick. That's why this thing is - both 

5 of them defeat power analysis. QIU only defeats the simple power analysis. 

6 Ours defeats both the simple power analysis and the more advanced 

7 differential power analysis, differential being looking at a bunch of different 

8 times of usage with the same inputs to see how this thing branches and then 

9 figuring out which branch of the algorithm takes place and then using that 

10 information to ~ 

1 1 JUDGE HOMERE: I have a residual question for you. 

12 MR. SPOONER: Okay. 

13 JUDGE HOMERE: What language here in this claim that captures 

14 the concept of a differential power analysis here? 

15 MR. SPOONER: There is nothing that says differential power 

16 analysis. There's no wording in the claim or in the specification or anything 

17 else. That's what - 

18 JUDGE HOMERE: And that's what I'm saying, what language? I 

19 mean do you have any language in there that would - 

20 MR. SPOONER: The language that enables differential power 

21 analysis to be defeated is the language up in the third paragraph that says at 

22 least one data processing instruction executed though the - is a conditional- 

23 write data processing instruction encoding condition codes, specifying 

24 conditions under which conditional-write data processing will or will not be 

25 permitted to write data to effect a change. 
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1 JUDGE HOMERE: Okay, I think we understand each other. 

2 JUDGE HUGHES: If I understand your argument correctly -- 

3 MR. SPOONER: And I'm not sure I understand it correctly, so feel 

4 free to ask. 

5 JUDGE HUGHES: Okay, well, we're going to hold your feet to the 

6 fire here because, you know, we're giving lots of names to different things, 

7 but we're not getting down to the meat of this claim. What I'm 

8 understanding your argument to be is that the instruction itself has a code in 

9 it, a zero or a one, as opposed to you're saying QIU - 

10 MR. SPOONER: Not necessarily at ~ 

1 1 JUDGE HUGHES: -- does not have that instruction with that -- 

12 MR. SPOONER: Not necessarily a zero or a one, but otherwise 

13 you're correct. 

14 JUDGE HUGHES: Well, then some kind of code. 

15 MR. SPOONER: Yes. 

16 JUDGE HUGHES: You don't specify what kind of code, so some 

17 kind of coding in it. If you -- 

18 MR. SPOONER: Right, well, it does -- it specifies conditions under 

19 which conditional- write data processing will or will not, so it is some code 

20 that specifies those - 

21 JUDGE HUGHES: Right, so will or will not is digital. It's a zero or 

22 one, so can we just get down to - 

23 MR. SPOONER: Well, it could be. 

24 JUDGE HUGHES: -- that it either tells it to do -- it's conditional? It 

25 either does or doesn't do something - 
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1 MR. SPOONER: Right. 

2 JUDGE HUGHES: -- and a code that tells it to do something or not 

3 do something and QIU — 

4 MR. SPOONER: But it might tell it write, always write. Write to this 

5 one in -- 

6 JUDGE HUGHES: All right, I'm trying to get you to simplify your 

7 argument here a little bit. Would you agree that QIU has a -- has 

8 instructions that write to a dummy register or do not write to a dummy 

9 register as part of its algorithm? 

10 MR. SPOONER: I don't think QIU has instructions as that term is 

1 1 commonly understood. 

12 JUDGE HOMERE: It doesn't like the term instruction. 

13 JUDGE HUGHES: An algorithm -- 

14 MR. SPOONER: An algorithm, yes. 

15 JUDGE HUGHES: All right, and an algorithm -- you're saying an 

16 algorithm isn't made up of instructions then? Because that's how I 

17 understand what an algorithm -- 

18 MR. SPOONER: Algorithm is different from instructions. 

19 JUDGE HUGHES: Okay. Well, we might have to agree to disagree 

20 on that point. But - 

21 MR. SPOONER: Take the definition of instructions. We attached a 

22 copy to the Reply Brief. Examiner never saw it, so take it for what it's 

23 worth. 

24 JUDGE HUGHES: Okay. 

25 MR. SPOONER: Or do your own Internet search. 
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1 JUDGE HUGHES: So going back again to your explanation seems to 

2 be that the invention requires an instruction with encoding to do a 

3 conditional operation, either write or not write? 

4 MR.SPOONER: Yes. 

5 JUDGE HUGHES: And you're saying QIU does not have instructions 

6 that are so encoded? 

7 MR.SPOONER: Right, exactly. That's the first thing we're saying 

8 QIU doesn't have. 

9 JUDGE HUGHES: Okay. 

10 MR. SPOONER: The second thing we're saying QIU doesn't have is 



1 1 the trash register as defined in the claim. Not QIU has a trash register, but 

12 he doesn't have a trash register that has any of the other attributes, 

13 interrelationship attributes specified in the claim to which a data -- result 

14 data value will be written instead of a data processing register. Upon 

15 execution of said conditional- write data processing instruction, when said 

16 condition codes within said conditional- write data processing instruction do 

17 not permit a write to effect a change in the state of the processor core. He 

18 doesn't have that either. 



19 JUDGE HOMERE: One question. 

20 MR.SPOONER: Okay. 

21 JUDGE HOMERE: Okay, well, the zero - let's focus on the zero and 

22 on the binary status of QIU. QIU says that well, if you have a zero - I'll 

23 just - we'll go on that. If you have a zero, then you write to a trash register. 

24 If you have a one, then you do not write to the trash register. 

25 MR. SPOONER: You're talking about this column 6 now? 
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1 JUDGE HOMERE: Column 6, yes. 

2 MR. SPOONER: Okay. 

3 JUDGE HOMERE: If you have a zero, you write to the trash register. 

4 If you do not have a zero, then you're not permitted to write to the trash 

5 register. 

6 MR. SPOONER: Okay. 

7 JUDGE HOMERE: Right. Now isn't it -- aren't these conditions that 

8 determine whether -- when it is acceptable to write to the trash register or 

9 not? 

10 MR. SPOONER: Sure, sure. 

11 JUDGE HOMERE: How would that be - 

12 MR. SPOONER: They are conditions, no doubt. But that's not the 

13 same as the condition code, an encoded condition code. Different animal. 

14 JUDGE HOMERE: Okay. All right. Do you have anything else? 

15 MR. SPOONER: Well, just to diverge somewhat, if we don't -- if 



16 QIU doesn't teach this data processing instruction with its encoded 

17 conditional code and if it doesn't -- or if it doesn't teach a trash register 

18 which is responsive to these things, as set out in the claim, it can't possibly 

19 anticipate. If it can't anticipate, then combining that reference with another 

20 reference in the obviousness rejection, that doesn't support the obviousness 

21 argument as well, because the Examiner doesn't allege that the at least one 

22 processing instruction or the trash register as claimed are shown in the 

23 second reference. And so the first prong of the obviousness test isn't met. 

24 Second prong is there's no reason to combine them. Third prong is and our 

25 contention is that the prior art teaches away from it. It precludes it. So there 
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1 is no anticipation. There is no obviousness. But it all hinges on whether 

2 those last two paragraphs of claim 1 and similar method steps in claim 6 are 

3 shown in QIU, and they're just not there. QIU is an algorithm based system. 

4 Ours is a write instruction based system. 

5 JUDGE HOMERE: I think that -- 

6 MR. SPOONER: Thank you so much. 

7 (Whereupon, the proceedings were concluded on Wednesday, 

8 November 4, 2009.) 
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